ChatPingo Infrastructure ("ChatPingo," "we," "us," or "our") operates chatpingo.com and the ChatPingo application (the "Service"), a WhatsApp automation platform that lets businesses connect their own WhatsApp number, manage contacts, send campaigns, and automate replies. This Privacy Policy explains what data we collect, why, how it's stored, and the choices you have. It applies to visitors of chatpingo.com and to registered users of the Service.
If anything here is unclear, or you want to exercise any of the rights described below, contact us at hello@chatpingo.com.
1. Who we are
ChatPingo Infrastructure, 124 City Road, London, EC1V 2NX, United Kingdom. We are the data controller for account and billing data described below, and — where you connect a WhatsApp number and run campaigns to your own contacts — you (the ChatPingo customer) act as the data controller for your contacts' data, with ChatPingo acting as your data processor for that traffic. Section 6 explains this split in more detail.
2. Information we collect
Account information. When you register, we collect your name, email address, and password (stored as a salted hash, never in plain text) or, if you sign in with Google, your Google account id, name, and email address as shared by Google.
WhatsApp session data. ChatPingo connects to WhatsApp using the same end-to-end-encrypted protocol as WhatsApp Web (via the open-source Baileys library) — this is not the official WhatsApp Business Platform API. When you link your number by scanning a QR code, we store the resulting session credentials (authentication keys, not your WhatsApp password, which WhatsApp never exposes to third parties) so the connection can stay active without you rescanning. This data is held in access-controlled, password-protected infrastructure and a database backup used solely for disaster recovery of your own connection.
Messages and contacts. To provide the Service we process the content of messages you send and receive through your connected number, the contact list you upload or sync (names and phone numbers), and campaign configuration and delivery results. If you enable AI-generated auto-replies, the relevant message text is sent to our AI provider (OpenAI) solely to generate a reply suggestion or response; it is not used to train third-party models.
Media files. Images, documents, and other media sent or received through the Service are stored in our cloud storage (Amazon S3) so they can be displayed in your inbox and campaign history.
Billing information. Subscription payments are processed by MamoPay (card payments) or Paychainly (cryptocurrency payments). We receive confirmation that a payment succeeded or failed, an amount, and a transaction reference — we do not receive or store your full card number or wallet private keys; those are handled entirely by our payment processors.
Usage and device data. Standard technical data such as IP address, browser type, and pages visited, collected via normal web server logs. We do not use third-party advertising or analytics trackers (e.g. Google Analytics, Facebook Pixel) on chatpingo.com. Your login session is kept in your browser's local storage, not in tracking cookies.
Communications. If you email us or contact support, we keep that correspondence to respond to you and improve the Service.
3. How we use your information
- To provide, maintain, and secure the Service, including keeping your WhatsApp connection alive and delivering your campaigns and messages.
- To process payments, manage subscriptions, and send billing-related notices.
- To generate AI-assisted reply suggestions when you enable that feature.
- To send account, security, and service-related emails (e.g. password resets, connection alerts).
- To respond to support requests.
- To detect, investigate, and prevent abuse, fraud, or violations of our Terms of Service.
- To comply with legal obligations.
We do not sell your personal data, and we do not use your messages or contacts to serve advertising.
4. Who we share data with
We share data only where necessary to run the Service:
- Infrastructure providers hosting our servers, databases, and file storage (including Amazon Web Services for media storage).
- Payment processors MamoPay and Paychainly, to process your subscription payments.
- AI provider OpenAI, only for message text you explicitly route through an AI auto-reply feature you enable.
- Email delivery provider, to send account and transactional emails.
- Law enforcement or regulators, only where we're legally required to.
We do not sell or rent your data, or your contacts' data, to anyone.
5. Data retention
We retain account data for as long as your account is active. Message and campaign history is retained so you can access your own communication history and analytics; you can delete individual conversations, contacts, or your entire account at any time from within the Service, or by asking us at hello@chatpingo.com. WhatsApp session credentials are deleted when you disconnect a session or close your account. We may retain limited billing records longer where required by tax or accounting law.
6. Your contacts' data
If you upload or sync a contact list and send campaigns through ChatPingo, you are responsible for having a lawful basis (such as consent or an existing business relationship) to message those contacts, and for complying with WhatsApp's own Business Messaging Policy and applicable anti-spam and data protection law. In this relationship, you are the data controller for your contacts' personal data, and ChatPingo processes it on your behalf, only as needed to deliver the Service. If you need a Data Processing Agreement for your own compliance purposes, contact hello@chatpingo.com.
7. Your rights
Depending on where you live, you may have the right to access, correct, export, or delete your personal data, or to object to or restrict certain processing. You can manage most of this directly from your account settings, or by emailing hello@chatpingo.com — we'll respond within 30 days. If you're in the UK or EEA, you also have the right to lodge a complaint with your local data protection authority (in the UK, the Information Commissioner's Office).
8. International transfers
Our infrastructure and service providers may process data outside your home country, including in the United States (for AI processing and cloud storage). Where required, we rely on appropriate safeguards such as standard contractual clauses for these transfers.
9. Security
We use industry-standard measures to protect your data, including encrypted connections (HTTPS/TLS) for all traffic, password-protected and access-restricted databases, and hashed (never plain-text) storage of account passwords. No system is 100% secure, and we encourage you to use a strong, unique password and enable any additional protections WhatsApp itself offers on your linked number.
10. Children's privacy
The Service is intended for business use and is not directed at children. We do not knowingly collect personal data from anyone under 16.
11. Changes to this policy
We may update this Privacy Policy from time to time. If we make material changes, we'll notify registered users by email or an in-app notice before the changes take effect. The "Effective date" above always reflects the current version.
12. Contact us
ChatPingo Infrastructure, 124 City Road, London, EC1V 2NX, United Kingdom. hello@chatpingo.com · +44 20 7123 4567.
See also our Terms of Service.